For Good Measure: The Undiscovered.
Dan Geer · ;login:: the magazine of USENIX & SAGE · 2015
Precis: Security metricians must steal all the techniques we can—we don’t have the time to invent everything we need from scratch. This column does just that, motivated by the question of whether patching matters, a question that just will not go away...